skysight-inc/HackerNews huggingface dataset:
Author here. I’ve got a few more posts on VPR coming in the next couple of weeks. If you have any requests for deep dives into specific aspects of the architecture, feel free to drop them here!
Corporate proxy servers often downgrade connections to HTTP 1.1 because inertia and lazy vendors.
In a weird coincidence, this morning I watched an old video about the Iranian airliner downed by a US missile in the Persian gulf. These accidents are just horrible.
It won't happen, but jury nullification seems appropriate for a case where barely relevant charges are being added to send a message.
1) Learn AWK deeply, in which I will meticulously go through a copy of the original 1988 book.

2) Get better at Git.

3) Study and pass the RHCSA.

4) Get better at troubleshooting Linux servers. I can actually feel my skills improving when I can find the actual root cause of an issue, and not just a symptom that is irrelevant. (Thanks, sadservers!)
Does anyone have a good trick for figuring out when the client side connection is closed? I just kill the connection on the server every N minutes and force the client to reconnect, but it's not exactly graceful.

Secondly, on iOS mobile, I've noticed that the EventSource seems to fall asleep at some point and not wake up when you switch back to the PWA. Does anyone know what's up with that?
the interesting part is the ramifications of propaganda on the justice system. This is a very concrete example of how you can interfere with the rule of law if you can sway public opinion enough on an issue (this is true regardless of whether you believe the zeitgeist on luigi is organic or not). It's a dynamic more of us should be aware of. The public generally has more agency than we realize.
I looked into the core js author's story and there's nothing off about him to me. He just played a role in the post-install messages being curtailed. https://docs.npmjs.com/cli/v9/commands/npm-fund?v=true As for that other thing, this puts it well: "I won't get into details - no one knows the full story - so I let you make your own opinion". https://www.izoukhai.com/blog/the-sad-story-of-denis-pushkar... I read the story (the link in that post is old) and I ended up giving him the benefit of the doubt. https://github.com/zloirock/core-js/blob/master/docs/2023-02... Also in that post is that Babel didn't fork it. That's another thing to take into account when making your own opinion.
It’s sadly somewhat common: https://en.wikipedia.org/wiki/List_of_airliner_shootdown_inc...

Russia/USSR does seem overrepresented here.
"Terrorism"...
Nope it doesn’t, they did take that into account during development.
I'm not going to say zoning isn't a problem, but the article admits "Minneapolis, for instance, experienced limited development after eliminating single-family zoning."

I think the problem is less about zoning and due more to the number of people around who can build houses. Everyone went off to college to be a white collar worker and there just isn't a lot of plumbers and electricians per capita anymore. And that's not easy to fix. You can't even import these sort of people because of licensing, bonding, insurance, etc regulations that exist on these blue collar workers now. It's an uphill battle trying to change any of those regulations too, because insurance companies will fight you.
Thanks! The shop currently is Greek only and I disabled google translate sitewide because it breaks React (https://issues.chromium.org/issues/41407169)
I'm a bit confused - where did the OP post their résumé?
It’s also useful in typed languages to introduce an existentially quantified type
Cool concept! What are the X and Y axes?

Oh, and your website has an unchanged Wordpress favicon...
This is odd.

I'm from the area, near Grozny. If Grozny were under fog, there are at least 10 airports nearby (Makhachkala, Vladikavkaz, Nalchik, Minvody, Rostov, Krasnodar etc) in the North Caucasus. Why would you fly east, across the Caspian Sea, toward Kazakhstan?
The two fast.ai courses end up implementing Stable Diffusion from scratch if that’s the sort of thing you are looking for.
For a very small subset of the population.
You could say the same thing about assembly language.
I'm surprised at people falling back into the BSD, MIT and GPL banter from 15 years ago.

Stop promoting your faves, stop generalizing about the motivations behind your non-faves, and to paraphrase John Lennon: imagine no licensing.

Now think a little deeper how that would change the motivations of developers, massive corporations, and VCs. Especially those that have given little but lip service to the whole movement.
> The secret is multiple accounts.

There was a "show hn" many months ago that did stylometry on HN commenters to show which accounts were most stylistically similar; I ran a throwaway account of mine through it, and it showed my account in the top 3 - which was impressive.

Having multiple accounts won't save you when your own word choice, grammar and style can uniquely identify you to anyone sufficiently motivated to link your disparate identities at any point in the future. The author even said their tool was rather basic; IIRC the basis was all pairs similarity on n-grams
Same thing for me—4 years ago, Rails 4.2. Now on 6.0, work for 6.1 is wrapped up. I did just finish going from Ruby 2.7 to 3.3. Any particular issues you’re having, or just working through the process?
I'm not going to say it is impossible, but the thing to keep in mind is electronics test equipment benefited from incredible improvements in and the mass adoption of most of the components that go into them. While SEMs can benefit from that, I don't foresee it happening for some of the vital components.
Now that’s democracy
It’s funny how HN has a mix of people who think AGI is just around the corner, people trying to build/sell stuff that uses LLMs, and others who can’t stand LLM-generated content. Makes me wonder how much overlap there is between these groups.
They are handy for implementing simple ad-hoc hot reloading systems as well. E.g. you can have whatever file watcher you are using call an API when a file of interest changes that sends an event to listening clients on the frontend. You can also trigger an event after restarting the backend if you make an API change by triggering the event at boot time. Then you can just add a dev-only snippet to your base template that reloads the page or whatever. Better than nothing if your stack doesn't support it out of the box and doesn't take very much code or require adding any additional project dependencies. Not as sophisticated as React environments that will only reload a component that changed and only do a full page refresh if needed, but it still gives a nice, responsive feeling when paired with tools that recompile your backend when it changes.
Agree it’s not a toy. AWS implemented a large chunk of IAM in Dafny. Though IIRC they have their own non-public compiler to Java
1. speak english properly, because i'm planning to move abroad, and get a job as an engineer.

2. how to self hosting, like buy a cheap machine, create a website like blog, setup a kubernetes cluster, backup and security stuff (for learning purposes)

3. drive a car
So why is India such a resistance hotspot?
With a username like jgalt you'd better have knocked on wood when you clicked that "add comment" button.
Sounds like a good way to go to jail, when Hertz sells you the car and then reports it as stolen to the police. Hertz does this very, very frequently to paying customers.
> Ah, so malware can no longer manipulate boot state,

Which is an immense benefit.

> just steal all of your passwords

2FA, often now thanks to a HSM (Hardware Security Module) shielding your secrets precisely should your account be compromised (Yubikey, passkeys, ...)

> and credit cards

2FA. My credit cards companies (EU) ask me to sign on a physical hardware device the bank gave me any transaction I make with my credit card when it's either above a certain amount of to an unkown vendor (or both).

> and cryptocurrency

2FA. Cryptocurrencies hardware wallet use an HSM which shields the secret from attackers.

> and make user-level persistent processes.

Which you can detect from root, but only as long as root ain't compromised too.

A local exploit which can be detected and patched is bad but it's not anywhere near as bad as a root exploit which could potentially control the entire boot chain (maybe not SecureBoot if it's setup properly) and lie to you about everything.

Put it another way: it's precisely because a local exploit is not a root exploit that a system can be configured in such a way that should a local exploit happen, the system can make sure that that local exploit doesn't get to stay persistent.

A non root exploit cannot lie to root, which is why there's a distinction between a local exploit and a root one.

Now we begin to have the possibility to boot a minimal immutable Linux distro (maybe even from a read-only medium like a DVD [1]) , maybe from a UKI and a signature enforced by SecureBoot, and from that minimal immutable system, maybe launch something like a VM and/or containers (I prefer my containers to run inside VMs but YMMV).

For example we can begin to envision the following:

SecureBoot -> signed UKI -> Proxmox -> VM -> stateless containers

I am very excited that this now begins to be possible.

Don't you see any value in that?

I don't run an immutable distro yet but I already have throwaway user accounts, mounted on temporary and "noexec" mountpoints.

If you tell me: "Here's a system where it's guaranteed a malware can never ever manipulate boot state", I'll manage to find a way to build a system on top of that where local exploit cannot possibly persists.

Immutable distros are working towards that goal.

And I definitely see where the value is.
Let's call a spade a spade. "Orc" is a dehumanizing term that the Ukrainian military propaganda invented and popularized to make it psychologically easier for their soldiers to shoot at Russians. Because they are not dropping a grenade from a drone on a human, they are just dropping a grenade on an orc, on a monster from a video game.

For Americans in the audience, "Orc" belongs to the same category as "Jap", "Gook", "Sandn**r", and all similar dehumanizing terms that American soldiers have used to make it psychologically easier to shoot and bomb their enemies.
VictoriaLogs - it is fully open source released under Apache2 license, and it can efficiently store and query these "plain old JSONs" with hundreds of fields (aka wide events) - https://docs.victoriametrics.com/victorialogs/keyconcepts/#d...
I kind of half expect him to be acquitted under the "needed killin'" doctrine.
It goes to motivation, until recently there's been a lot of talk about 'pure' hydrogen extraction but little actual pragmatic hydrogen exploration; specifically funded hydrogen targetted developable resource programs.

Now that there's growing economic justification for investing time and money (at least a decade, easily on the order of a billion (that seems low) outlay before return) in hydrogen, serious exploration starts.

As in all exploration phases the money funnel begins with prospects which means record crawling looking for patterns - actively developing prospects and mapping prospect fields expands on the current pattern knowledge and that better understanding, trained on emperical results, gets cycled back into the record crawling phase.

This goes to the original question, there is already detailed data, seventy years worth of logged geophysical, vaulted by major explorers; prospectors who look at a $50 million USD TSX prospectus as the absolute minimum low bar of any interest in capital rasing mineral development projects.

Buried in that data is almost certainly (confidence) patterns that identify most of the larger near surface deposits.

NB: the italic stresses are deliberate, across the entire globe, looking back from 50 years after today, that seems likely to stand up as a geostatistical statement of formal E(xpectation).

In the course of going forward from today a better understanding of how to read the tealeaves wrt hydrogen will develop, and this:

> You're linking to papers suggesting innovative novel methods for finding the stuff or talking about rechecking based on the latest theoretical understanding, suggesting we don't actually have a big historic archive to draw on.

will look exactly right only flipped: we have a big historic data archive, we need to develop a better prospect filter for a new resource of interest.

Years ago a similar thing happened with gold data, a big historic data archive got reprocessed with better algorithms using the latest <cough> learnings </cough> and then a few years after that watered down academic papers appeared, eg:

Towards the automated analysis of regional aeromagnetic data to identify regions prospective for gold deposits https://www.sciencedirect.com/science/article/abs/pii/S00983...

that talked about trawling already existing data archives for correlated patterns.

This is part of the ongoing grind of geophysical exploration.
You can try 100 searches for free, or you can try one month to see if you like it. What's more important is that you have to learn to make decisions on your own in life, instead of relying on what other people tell you.
Show HN: FireFox95 a 9x UserChrome.css
A Win95 themed userChrome.css for Firefox
How do you rework a core process, then? If you rework a major unit that touches just about everything... Sharding something like that can break the actual improvement it is trying to deliver.

Like... Increase the performance of a central VM. You'll touch every part of the code, but probably also build a new compiler analysis system. The system is seperate to existing code, but useless without the core changes. Seperating the two can ruin the optimisation meant to be delivered, because the context is no longer front and center. Allowing more quibling to degrade the changes.
Aye. Sign of the times. You're 20+ years in, so I'm preaching to the choir and old-man-yelling-at-cloud here.

Cargo culting + AI are the culprits. Sucks to say, but engineering is going downhill fast. First wave of the shitularity. Architects? Naw, prompt engineers. Barf. Why write good code when a glorified chatbot could do it shittier and faster?

Sign of our times. Cardboard cutout code rather than stonemasonry. Shrinkflation of thought.

Peep this purified downvote fuel:

Everything is bad because everyone is lazy and cargo cults. Web specifically. Full-stop. AI sucks at coding and is making things recursively worse in the long run. LLMs are nothing more than recursive echo chambers of copypasta code that doesn't keep up with API flux.

A great example of this is the original PHP docs, which so, so many of us copypasta'd from, leading to an untold amount of SQL injections. Oopsies.

Simalarily and hunting for downvotes, React is a templating framework that is useful but does not even meet its original value proposition, which is state management in UI. Hilariously tragic. See: original example of message desync state issue on FB. Unsolved for years by the purported solution.

The NoSQL flash is another tragic comedy. Rebuilding the wheel when there is a faster, better wheel already carefully made. Postgres with JSONB.

GraphQL is another example of Stuff We Don't Need But Use Because People Say It's Good. Devs: you don't need it. Just write a query.

-

You mention a hugely important KPI in code. How many files, tools, commands, etc must I touch to do the simplest thing? Did something take me a day when it should have taken 30s? This is rife today, we should all pay attention. Pad left.

Look no further than hooks and contexts in React land for an example. Flawed to begin with, simply because "class is a yucky keyword". I keep seeing this in "fast moving" startups: the diaspora of business logic spread through a codebase, when simplicity and unity is key, which you touch on. Absolute waste of electricity and runway, all thanks to opiniation.

Burnt runways abound. Sometimes I can't help but think engineering needs a turn it off and then on again moment in safe mode without fads and chatbots.
If megafauna population is constrained by food availably then slight (a couple percent annual mortality) hunting pressure will not do all that much to reduce overall population.

You can look at modern game animal populations to see how the feedback loops work.
That was really neat. Thank you!
When one of these articles come up, I always wonder if the authors have ever looked at APL-family languages and the people who use them, or those who have a similar ultra-compact style even with more mainstream languages; here are the most memorable examples that come to mind:

https://news.ycombinator.com/item?id=8558822

https://news.ycombinator.com/item?id=28491562

What's the "cognitive load" of these? Would you rather stare at a few lines of code for an hour and be enlightened, or spend the same amount of time wading through a dozen or more files and still struggle to understand how the whole thing works?
> If you keep the cognitive load low, people can contribute to your codebase within the first few hours of joining your company.

I guess there’s a lot of wiggle room for what is really being asserted here, but this seems like an absurd impossible claim.
I was never able to leave the Firefox revolution. Chrome kept syncing my bookmarks out of order. I have never had it happen on Firefox.
it's gonna be pretty difficult to compete with used prices and make a profit with the likely volumes. The tubes aren't exactly something that scales down to low volumes either.
The problem I see here isn't that the space has been poisoned by scammers. It's that bridging on-chain state with real world state is fundamentally impossible without sacrificing a lot of the blockchain's guarantees (you need some centralized, trusted party to act as a bridge) at which point you may as well let your bridge just be the sole source of truth and run a conventional (publicly-readable if necessary) database.

> specifying and enforcing intellectual property rights

The incentive to care and participate in the real-world, court-enforced intellectual property system is that if you don't and you piss off enough people, goons with guns will show up and take you/your stuff/money away. Those goons can behave like that because they have the legal system's approval to do so and thus don't risk their own freedom.

Let's say this thing existed - what's the incentive for someone to care and participate into that system? Do you have your own goons with guns? Do you convince the conventional legal system to send their own goons? In both cases, why not just skip the blockchain then and let you run a conventional database, since what actually matters is your choice to send goons to enforce the desired state (and their willingness to do so), and not necessarily what some blockchain says?
Only if you distribute the binary/source of the GPLd library. You may build a non-GPL program that dynamically links with a GPL library and freely distribute it. As long as your program does not contain copyrightable code, you do not have to comply with the licence requirements, because you do not need a licence at all to do that. Same applies for static linking if you only distribute the source and require your users compile the program themselves.

This is not limited to GPL, but applies to proprietary libraries as well. It's OK to require a proprietary library at runtime and you don't need a licence to do that. As long as you do not distribute some intellectual property, copyright law and its limitations are not applicable at all.

This sounds quite assertive, so compulsory "IANAL, this is just my interpretation".
Russian soldiers.
Yeah, that's what Python's "batteries included" slogan means. Perl and Python not only ship with lots of libraries, but have built-in functions for file manipulation and running arbitrary shell commands as part of the core language: https://news.ycombinator.com/item?id=42509544
That effectively gives the copyright holder an exclusive ten year head start on a derivative work, because only they have the source to build on. It has to be open from day one for anything to work. And if you blow away copyright and therefore GPL, obviously the incentives change dramatically.
Fighting games have a term for this: "mental stack".

https://glossary.infil.net/?t=Mental%20Stack
This is why I design the heckin' huge change at the start, and then cherry pick the actual change (and associated tests) into a ton of smaller PRs, including "refactor here", "make this function + tests", "make this class + tests", "integrate the code + tests", and so on, as many times as necessary to have testable and reviewable units of code.

If I went about and made a ton of changes that all went into dead ends, honestly, I would get pretty demoralized and I think my team would get annoyed, especially if I then went through and rolled back many of those changes as not ending up being necessary.
Most modern attacks succeed by remaining undetected and this directly counters that. When combined with “every IP address responds to ARP and ICMP” (as discussed recently), you can make it impossible for an attacker to scan your network without firing off a honeypot alarm that introduces increasing packet loss on the attacker’s host as scans continue, providing enough time for an oncall human to finish what they’re doing and get to a keyboard to deal with the intrusion.

The next level of value for this is to TLS-encrypt random traffic between ports and hosts on the network, generated and injected by the switch into each network port, so that sniffing traffic is not an effective discovery mechanism. After that, address and port randomization of servers using a time-linked randomization seed stored in an HSM, so that attackers have no way to pierce the onion skin if they lose control of the HSM-bearing host.

This is all the natural outgrowth of container approaches, but in labor terms is nightmarishly complicated if you aren’t willing to spend for it.
Ok, but what about asking someone who knows (anything)?
The benefit of the doubt is a luxury. Yes of course the author deserves it but if you're operating a bank, a government, or a military, (granted not the core audience of this post) you can't afford to give the benefit of the doubt.
Disable ublock origin on Youtube, or pay for Youtube.

As for artificial lag, I suspect it is because it using the web standard version of Youtube. Had this issue with Google Sheets where paste did not work correctly (forget exactly what it is) and it did work on Chrome. Google uses non-standard things to optimize the experience.

It is not acceptable, but it is also an issue that will go away once more people go back to the fox.
I think it was argued that the reason TP-Link was singled out is because of their pattern of vulnerabilities across their entire product lines going back perhaps a decade(?). The same could probably be said of other brands as well though, if not, more.

* https://youtu.be/ZCdZaSu68Kk?si=C7qumnao_bfvGvUo&t=138

* https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=tp-link
And there are multi-PR processes that can be followed to most successfully convert those changes in a comprehensible way.

It'll often include extra scaffolding and / or extra classes and then renaming those classes to match the old classes' name after you're done, to reduce future cognitive load.
Once hacker-level-hobbyists get involved they'll probably figure out how to calibrate it with a Raspberry Pi and a 3D printer.
They don't need to be "victims" for what I wrote to apply.
They must have edited it out.
Encapsulation arguably isn’t a good part, either. It encourages complex state and as a result makes testing difficult. I feel like stateless or low-state has won out.
Probably because without http/2 each would require a TCP connection, which could get expensive.
You can easily multiplex data over one connection/event stream. You can design your app so that it only uses one eventstream for all events it needs to receive.
No. This approach is strictly for DBS like sqlite without uuid or 128bit integer support.